Hunt List
8,457 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-28185 |
9.8 | 0.0027 | NET NO AUTH LOW CX NO UI | Unauthenticated Broken Authentication in Log in with Google <= 1.4.2 versions. | |
|
80
|
CVE-2026-42864 |
9.9 | 0.0027 | NET NO AUTH LOW CX NO UI | FireFighter is an incident management application. Prior to 0.0.54, the POST /ap | |
|
78
|
CVE-2026-7874 |
9.1 | 0.0027 | NET NO AUTH LOW CX NO UI | IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow disclosure of all sto | |
|
78
|
CVE-2026-89035 |
9.1 | 0.0027 | NET NO AUTH LOW CX NO UI | MikroTik RouterOS through 7.24.5 contains a session token replay vulnerability i | |
|
78
|
CVE-2026-107685 |
9.1 | 0.0027 | NET NO AUTH LOW CX NO UI | Improper Certificate Validation vulnerability in the WebSocket streaming client | |
|
77
|
CVE-2026-89216 |
8.6 | 0.0027 | NET NO AUTH LOW CX NO UI | The vTables WordPress plugin before 0.3 does not properly sanitise and escape a | |
|
76
|
CVE-2026-34064 |
8.2 | 0.0027 | NET NO AUTH LOW CX NO UI | nimiq-account contains account primitives to be used in Nimiq's Rust implementat | |
|
76
|
CVE-2026-63867 |
8.2 | 0.0027 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: mptcp: clos | |
|
75
|
CVE-2026-53070 |
7.5 | 0.0028 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: sctp: disab | |
|
75
|
CVE-2026-6756 |
7.5 | 0.0027 | NET NO AUTH LOW CX NO UI | Mitigation bypass in Firefox for Android. This vulnerability was fixed in Firefo | |
|
75
|
CVE-2026-44407 |
7.5 | 0.0027 | NET NO AUTH LOW CX NO UI | A remote denial-of-service vulnerability exists in the ZTE Cloud PC client uSmar | |
|
75
|
CVE-2026-42334 |
7.5 | 0.0027 | NET NO AUTH LOW CX NO UI | Mongoose is a MongoDB object modeling tool designed to work in an asynchronous e | |
|
75
|
CVE-2026-56387 |
7.5 | 0.0027 | NET NO AUTH LOW CX NO UI | The RTMP AMF parser in Apache bRPC accepts AMF string lengths and array counts d | |
|
75
|
CVE-2026-118037 |
7.5 | 0.0027 | NET NO AUTH LOW CX NO UI | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027 | |
|
75
|
CVE-2024-55045 |
7.3 | 0.0027 | NET NO AUTH LOW CX NO UI | Firmament-Autopilot FMT-Firmware commit de5aec was discovered to contain a buffe | |
|
75
|
CVE-2026-1952 |
7.5 | 0.0027 | NET NO AUTH LOW CX NO UI | Delta Electronics AS320T has denial of service via the undocumented subfunction | |
|
75
|
CVE-2026-45090 |
7.5 | 0.0027 | NET NO AUTH LOW CX NO UI | Dalfox is a powerful open-source XSS scanner and utility focused on automation. | |
|
75
|
CVE-2026-15169 |
7.5 | 0.0027 | NET NO AUTH LOW CX NO UI | UMTS FP protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 | |
|
74
|
CVE-2026-46981 |
7.2 | 0.0027 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Utilities Network Management System product of Oracl | |
|
74
|
CVE-2026-71030 |
7.2 | 0.0027 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience | |
|
74
|
CVE-2026-71032 |
7.2 | 0.0027 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience | |
|
74
|
CVE-2026-73875 |
7.2 | 0.0027 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
74
|
CVE-2026-73876 |
7.2 | 0.0027 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
74
|
CVE-2026-73885 |
7.2 | 0.0027 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
74
|
CVE-2026-73886 |
7.2 | 0.0027 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
74
|
CVE-2026-73928 |
7.2 | 0.0027 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
74
|
CVE-2026-118257 |
7.2 | 0.0027 | NET NO AUTH LOW CX NO UI | Vue I18n is the internationalization plugin for Vue.js. From 11.1.10 until 11.4. | |
|
69
|
CVE-2026-17709 |
9.6 | 0.0027 | NET NO AUTH LOW CX | Race in Downloads in Google Chrome on Mac prior to 151.0.7922.72 allowed a remot | |
|
69
|
CVE-2026-17711 |
9.6 | 0.0027 | NET NO AUTH LOW CX | Race in Downloads in Google Chrome on Mac prior to 151.0.7922.72 allowed a remot | |
|
69
|
CVE-2026-17855 |
9.6 | 0.0027 | NET NO AUTH LOW CX | Race in DevTools in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote | |
|
68
|
CVE-2026-118304 |
8.8 | 0.0027 | NET NO AUTH LOW CX | Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed | |
|
68
|
CVE-2026-118311 |
8.8 | 0.0027 | NET NO AUTH LOW CX | Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a rem | |
|
68
|
CVE-2026-118313 |
8.8 | 0.0027 | NET NO AUTH LOW CX | Use after free in Video in Google Chrome prior to 156.0.8078.73 allowed a remote | |
|
68
|
CVE-2026-118314 |
8.8 | 0.0027 | NET NO AUTH LOW CX | Improper input validation in UI in Google Chrome on on Android prior to 156.0.80 | |
|
68
|
CVE-2026-118327 |
8.8 | 0.0027 | NET NO AUTH LOW CX | Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a rem | |
|
68
|
CVE-2026-43239 |
8.8 | 0.0027 | NET NO AUTH LOW CX | In the Linux kernel, the following vulnerability has been resolved: smb: client | |
|
67
|
CVE-2026-80465 |
8.7 | 0.0028 | NET NO AUTH NO UI | A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All v | |
|
66
|
CVE-2025-13017 |
8.1 | 0.0027 | NET NO AUTH LOW CX | Same-origin policy bypass in the DOM: Notifications component. This vulnerabilit | |
|
66
|
CVE-2025-13018 |
8.1 | 0.0027 | NET NO AUTH LOW CX | Mitigation bypass in the DOM: Security component. This vulnerability was fixed i | |
|
66
|
CVE-2025-13019 |
8.1 | 0.0027 | NET NO AUTH LOW CX | Same-origin policy bypass in the DOM: Workers component. This vulnerability was | |
|
66
|
CVE-2026-69247 |
8.2 | 0.0027 | NET NO AUTH NO UI | cryptography is a package designed to expose cryptographic primitives and recipe | |
|
66
|
CVE-2026-91546 |
8.1 | 0.0027 | NET NO AUTH NO UI | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of | |
|
65
|
CVE-2026-16404 |
7.4 | 0.0027 | NET NO AUTH LOW CX | Spoofing issue in Firefox for Android. This vulnerability was fixed in Firefox 1 | |
|
65
|
CVE-2026-55457 |
7.4 | 0.0027 | NET NO AUTH NO UI | The Goobi viewer is a web application that allows digitised material to be displ | |
|
64
|
CVE-2026-44215 |
7.1 | 0.0028 | NET NO AUTH LOW CX | NanaZip is an open source file archive. From 5.0.1252.0 to before 6.0.1698.0, a | |
|
64
|
CVE-2026-110839 |
7.1 | 0.0027 | NET NO AUTH LOW CX | FreeRDP 3.3.0 before 3.32.0, when built with WINPR_UTILS_IMAGE_JPEG=ON, has a he | |
|
57
|
CVE-2026-6311 |
8.3 | 0.0027 | NET NO AUTH | Uninitialized Use in Accessibility in Google Chrome on Windows prior to 147.0.77 | |
|
57
|
CVE-2026-109782 |
8.3 | 0.0027 | NET NO AUTH | Mitigation bypass in the File Handling component. This vulnerability was fixed i | |
|
57
|
CVE-2026-109783 |
8.3 | 0.0027 | NET NO AUTH | Mitigation bypass in the File Handling component. This vulnerability was fixed i | |
|
55
|
CVE-2026-110732 |
7.5 | 0.0027 | NET NO AUTH | The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPre |